Defining Mandatory Access Control's Business Value

Unauthorized access, viruses and spyware, and theft of critical and/or proprietary information is a threat faced by organizations of all types around the world, and especially by governments and financial institutions. The consequences for organizations affected by cyber crimes can include public embarrassment and loss of confidence by clients, the potentially high cost of responding to the loss of data, as well as civil and sometime criminal liabilities for regulatory violations. Mandatory Access Control (MAC) provides a unique innovation in security compared to the standard Discretionary Access Control (DAC) model. But beyond the functional and assurance advantages of MAC versus DAC, is there financial value to be gained?

To answer this question, IBM, Tresys and the Belmin Group Ltd performed an assessment to determine if there are compelling business benefits that can be realized. read about this in the new white paper: The Financial Benefits of Mandatory Access Control Security.

Related to this study, read about how Tresys worked with IBM to enable mandatory access control for the UK National Health Service.

Security Enhanced Linux
Tresys, the leading innovator to the SELinux open source project, has been working with the National Security Agency to develop secure operating systems for many years. SELinux represents the most advanced solution for mandatory access control, Type Enforcement®, and role-based access control. SELinux ensures that applications have only the minimum amount of access needed to perform tasks, preventing or containing damage from an attacker or broken applications. Read more about SELinux.

Tresys VM Fortress™ Secure Desktop Virtualization Solution